The Cl0p gang moves its way into US government systems. Itll take multiple showers to rinse out Shampoo malware. Hybrid war update. Arrests and indictments.

Published: June 16, 2023, 8:15 p.m.

The US Government discloses exploitations of MOVEit vulnerabilities, and the Department of Energy is targeted by the Cl0p gang. CISA releases an updated advisory for Telerik vulnerabilities affecting Government servers. Shampoo malware emerges with multiple persistence mechanisms. How the IT Army of Ukraine can exemplify a cyber auxiliary. Russophone gamers are being targeted with ransomware. An alleged LockBit operator has been arrested. The FBI\u2019s Deputy Assistant Director for cyber Cynthia Kaiser joins us with cybercriminal trends and recent successes. Our guest is Will Markow from Lightcast, speaking with Simone Petrella about data-driven strategic workforce decisions. And a federal grand jury indicts the alleged Discord Papers leaker.\n\nFor links to all of today's stories check out our CyberWire daily news briefing:\nhttps://thecyberwire.com/newsletters/daily-briefing/12/116\n\nSelected reading.\nUS government hit by Russia's Clop in MOVEit mass attack (The Register)\nEnergy Department among \u2018several\u2019 federal agencies hit by MOVEit breach (Federal News Network)\nThreat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers (CISA)\nCVE-2019-18935 Detail (NIST)\nCVE-2017-9248 Detail (NIST)\nCryptographic Weakness (Telerik)\nShampoo: A New ChromeLoader Campaign (HP)\nCyber attacks on Rotterdam and Groningen websites (World Cargo News)\nThe Dynamics of the Ukrainian IT Army\u2019s Campaign in Russia (Lawfare)\nWatch: Why early failures in Ukraine's counter-offensive aren't Russian victories (The Telegraph)\nRussian War Report: Anti-Ukrainian counteroffensive narratives fail to go viral (Atlantic Council)\nThreat Actor Targets Russian Gaming Community With WannaCry-Imitator (Cyble)\nHackers infect Russian-speaking gamers with fake WannaCry ransomware (The Record)\nRussian national arrested in Arizona, charged for alleged role in LockBit ransomware attacks (CyberScoop)\nSuspected LockBit ransomware affiliate arrested, charged in US (BleepingComputer)\nRussian national arrested in US for deploying LockBit ransomware (The Record)\nGuardsman indicted on charges of disclosing classified national defense information (AP News)\nCharges Against Alleged Pentagon Leaker Jack Teixeira Explained (Newsweek)\nJack Teixeira, Pentagon leaks suspect, indicted by federal grand jury (The Guardian)\nLearn more about your ad choices. Visit megaphone.fm/adchoices